CVE-2026-106020: Security vulnerability

Published Nov 6, 2026

Updated

Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and Tools Installer allows Search Order Hijacking.

This issue affects EasyIO Neo IO Manager and Tools Installer: 1.1.0.0.

Event History

Nov 6, 2026

CVE Published

via MITRE·02:04 PM

Data Sourced

via MITRE·02:04 PM

DescriptionWeakness

Frequently Asked Questions

Which assets should be checked during triage?

Inventory deployments of EasyIO Neo IO Manager and Tools Installer, with particular attention to version 1.1.0.0.

Are workaround, patch, or exploitation prerequisites provided in the available information?

No workaround, patch guidance, or attacker prerequisite details are provided in the available information.

CVE-2026-106020: Security vulnerability

Event History

Frequently Asked Questions

Which assets should be checked during triage?

Are workaround, patch, or exploitation prerequisites provided in the available information?

Company

Resources

Contact

Frequently Asked Questions

Which assets should be checked during triage?

Are workaround, patch, or exploitation prerequisites provided in the available information?